Register Members List Search Today's Posts Mark Forums Read

Reply
 
Thread Tools
  #31  
Old 29 May 2011, 02:16
syrus.xl's Avatar
syrus.xl syrus.xl is offline
 
Join Date: Jun 2005
Originally Posted by NBSFlak View Post
Are any of you guys on PSN? I'm getting all kinds of password reset requests today.
I'm not... I do not play any game consoles at all.

I had someone try and get in to my Facebook account, but again they failed. If you're using secure hashed passwords I would very much doubt they could crack it anyway.
Reply With Quote
  #32  
Old 29 May 2011, 02:20
warnmar10 warnmar10 is offline
 
Join Date: Nov 2003
203.153.31.27
200.96.37.206
Reply With Quote
  #33  
Old 29 May 2011, 02:20
Biker_GA Biker_GA is offline
 
Join Date: Oct 2004
Both myself and the owner of our site got notices as well. We're not pleased.
Reply With Quote
  #34  
Old 29 May 2011, 02:20
Hurricane Hurricane is offline
 
Join Date: Mar 2002
91.203.178.139
109.238.238.242

This was at 7pm EST for me.
__________________
Hurricane
Reply With Quote
  #35  
Old 29 May 2011, 02:42
ThorstenA's Avatar
ThorstenA ThorstenA is offline
 
Join Date: Nov 2004
46.0.203.92
77.247.211.160
Reply With Quote
  #36  
Old 29 May 2011, 02:51
SCRIPT3R SCRIPT3R is offline
 
Join Date: Jan 2005
118.97.81.155
222.124.29.242
Reply With Quote
  #37  
Old 29 May 2011, 02:52
SCRIPT3R SCRIPT3R is offline
 
Join Date: Jan 2005
118.97.81.155
222.124.29.242
Reply With Quote
  #38  
Old 29 May 2011, 02:53
SCRIPT3R SCRIPT3R is offline
 
Join Date: Jan 2005
118.97.81.155
222.124.29.242
Reply With Quote
  #39  
Old 29 May 2011, 03:09
JonUrban JonUrban is offline
 
Join Date: Jul 2003
I just got two. However, when I logged in here, my original password worked without issue. Very odd. What would they accomplish? I checked the login link in the email and it looked like a direct link, not a redirect.

Mine occured at 7:24PM, IP addresses were 201.24.152.98
and 178.213.33.129

Dear JonUrban,

Your account on vBulletin.org Forum has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 178.213.33.129

Don't forget that the password is case sensitive. Forgotten your password? Use the link below:
http://www.vbulletin.org/forum/login.php?do=lostpw

All the best,
vBulletin.org Forum
--------------- Added 29 May 2011 at 03:12 ---------------

Here's the header, minus my email address:

Status: U
Return-Path: <webmaster@vbulletin.org>
Received: from mx-dipper.atl.sa.earthlink.net ([207.69.195.166])
by mdl-glean.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP id 1qqsRV1T93Nl34L0; Sat, 28 May 2011 19:24:31 -0400 (EDT)
Received: from mx5.internetbrands.com ([98.158.194.50])
by mx-dipper.atl.sa.earthlink.net (EarthLink SMTP Server) with ESMTP id 1qqsRU3hE3Nl36u0
for <removed>; Sat, 28 May 2011 19:24:30 -0400 (EDT)
Received: from jelsoft3.internetbrands.com (jelsoft3.internetbrands.com [172.16.229.76])
by mx5.internetbrands.com (Postfix) with ESMTP id 678E3213E1
for <removed>; Sat, 28 May 2011 16:24:30 -0700 (PDT)
Received: from jelsoft3.internetbrands.com (localhost.localdomain [127.0.0.1])
by jelsoft3.internetbrands.com (8.13.8/8.13.8) with ESMTP id p4SNOU7P031866
for <removed>; Sat, 28 May 2011 16:24:30 -0700
Received: (from jelsoft@localhost)
by jelsoft3.internetbrands.com (8.13.8/8.13.8/Submit) id p4SNOUVh031863;
Sat, 28 May 2011 16:24:30 -0700
Date: Sat, 28 May 2011 16:24:30 -0700
X-Authentication-Warning: jelsoft3.internetbrands.com: jelsoft set sender to webmaster@vbulletin.org using -f
To: <removed>
Subject: Account on vBulletin.org Forum locked out
From: "vBulletin.org Forum" <webmaster@vbulletin.org>
Auto-Submitted: auto-generated
Message-ID: <201105282330.c21fda88bfd0@www.vbulletin.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-Mailer: vBulletin Mail via PHP
X-ELNK-Received-Info: spv=0;
X-ELNK-AV: 0
X-ELNK-Info: sbv=0; sbrc=.0; sbf=00; sbw=000;
X-Brightmail-Tracker: AAAAARgtX4o=
X-Brightmail-Tracker: AAAAAA==

Last edited by JonUrban; 29 May 2011 at 03:12. Reason: Auto-Merged DoublePost
Reply With Quote
  #40  
Old 29 May 2011, 03:17
WetWired's Avatar
WetWired WetWired is offline
 
Join Date: Jun 2002
I'm pretty sure the mails are legit. Especially since the guy with the first reply actually got his account hacked.
Reply With Quote
  #41  
Old 29 May 2011, 03:18
kh99 kh99 is offline
 
Join Date: Aug 2009
Real name: Kevin
Originally Posted by JonUrban View Post
I just got two. However, when I logged in here, my original password worked without issue. Very odd. What would they accomplish?
They didn't accomplish anything, they just tried to guess your password and failed. You say you just got those but the time says ~7:30 EDT so I guess the 15 minute lockout elapsed and you were able to log in.

Unless you mean "what do they hope to accomplish with only 5 guesses", then I don't know, seems like they'd have to get really lucky. Or they're just trying to annoy people, or clog the server with emails to send.
Reply With Quote
  #42  
Old 29 May 2011, 03:21
TundraSoul TundraSoul is offline
 
Join Date: Mar 2002
Hackers are out tonight!

94.228.204.30 x2
Reply With Quote
  #44  
Old 29 May 2011, 03:24
shof515 shof515 is offline
 
Join Date: Apr 2003
I got a similar email too:
Received: from mx5.internetbrands.com (mx5.internetbrands.com [98.158.194.50])
by mtain-mh02.r1000.mx.aol.com (Internet Inbound) with ESMTP id 8B0EA38000083
for <deleted>; Sat, 28 May 2011 19:21:36 -0400 (EDT)
Received: from jelsoft3.internetbrands.com (jelsoft3.internetbrands.com [172.16.229.76])
by mx5.internetbrands.com (Postfix) with ESMTP id 45D432006C
for <deleted>; Sat, 28 May 2011 16:21:36 -0700 (PDT)
Received: from jelsoft3.internetbrands.com (localhost.localdomain [127.0.0.1])
by jelsoft3.internetbrands.com (8.13.8/8.13.8) with ESMTP id p4SNLanG030536
for <deleted>; Sat, 28 May 2011 16:21:36 -0700
Received: (from jelsoft@localhost)
by jelsoft3.internetbrands.com (8.13.8/8.13.8/Submit) id p4SNLaBr030533;
Sat, 28 May 2011 16:21:36 -0700
Date: Sat, 28 May 2011 16:21:36 -0700
X-Authentication-Warning: jelsoft3.internetbrands.com: jelsoft set sender to webmaster@vbulletin.org using -f
To: deleted
Subject: Account on vBulletin.org Forum locked out
From: "vBulletin.org Forum" <webmaster@vbulletin.org>
Auto-Submitted: auto-generated
Message-ID: <201105282336.fc033e6fa850@www.vbulletin.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
X-Priority: 3
X-Mailer: vBulletin Mail via PHP
Content-Transfer-Encoding: quoted-printable
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:255893488:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-sid: 3039ac1d60d64de183801e9c
X-AOL-IP: 98.158.194.50
X-AOL-SPF: domain : vbulletin.org SPF : permerror
Reply With Quote
  #45  
Old 29 May 2011, 03:25
kh99 kh99 is offline
 
Join Date: Aug 2009
Real name: Kevin
Originally Posted by WetWired View Post
The lockout is actually IP specific.
Oh...so I guess if they have enough ips they can actually guess many times. Seems like it may be something to change in a future version. eta: ...oh, but I guess if it wasn't ip specific it would be easy for someone to keep you from logging in to your account.

Last edited by kh99; 29 May 2011 at 03:38.
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 20:05.

Layout Options | Width: Wide Color: